# \#none

**URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=690

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 691

---

## [Elasticsearch query text field by term](https://discuss.elastic.co/t/elasticsearch-query-text-field-by-term/298693)

<div class="topic-metadata">

**Author:** [@jiankunking](https://discuss.elastic.co/u/jiankunking)\
**Replies:** 1\
**Last updated:** [March 3, 2022, 8:04am UTC](https://discuss.elastic.co/t/elasticsearch-query-text-field-by-term/298693 "2022-03-03T08:04:25Z")

</div>

I have read the docs，Term query | Elasticsearch Guide \[8.0\] | Elastic I know that the text field should not be queried with term. But there's another sentence in the document The term query does not analyze the searc…

---

## [Alerts in kibana](https://discuss.elastic.co/t/alerts-in-kibana/298703)

<div class="topic-metadata">

**Author:** [@tharunkumar](https://discuss.elastic.co/u/tharunkumar)\
**Replies:** 1\
**Last updated:** [March 3, 2022, 6:40am UTC](https://discuss.elastic.co/t/alerts-in-kibana/298703 "2022-03-03T06:40:34Z")

</div>

I am facing an issue in kibana.can i know where the below alert is from and how to disable it. log \[12:08:35.877\] \[error\]\[alerting\]\[alerts\]\[plugins\]\[plugins\] Executing Alert "34af2110-24f6-11ec-8071-63a4b456f636" has …

---

## [How to make Average sub aggregation to consider parent aggregation count instead of current aggregation count?](https://discuss.elastic.co/t/how-to-make-average-sub-aggregation-to-consider-parent-aggregation-count-instead-of-current-aggregation-count/298403)

<div class="topic-metadata">

**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\
**Replies:** 5\
**Last updated:** [March 3, 2022, 4:13am UTC](https://discuss.elastic.co/t/how-to-make-average-sub-aggregation-to-consider-parent-aggregation-count-instead-of-current-aggregation-count/298403 "2022-03-03T04:13:09Z")

</div>

I am using ES 7.10.2 Mappings for fields are as follows: { "properties": { "ItemInfo": { "type": "nested", "include\_in\_parent": true, "properties": { "ShipInfo": { "type": "nes…

---

## [The active thread always in one dataNode，other dataNodes have very few active thread or no active thread](https://discuss.elastic.co/t/the-active-thread-always-in-one-datanode-other-datanodes-have-very-few-active-thread-or-no-active-thread/298686)

<div class="topic-metadata">

**Author:** [@1506299760](https://discuss.elastic.co/u/1506299760)\
**Replies:** 19\
**Last updated:** [March 3, 2022, 3:15am UTC](https://discuss.elastic.co/t/the-active-thread-always-in-one-datanode-other-datanodes-have-very-few-active-thread-or-no-active-thread/298686 "2022-03-03T03:15:33Z")

</div>

I have 3 master nodes,6 data nodes and every dataNode has almost same quantity and size data，I export data to dataNode evenly。 when I send requests to do pressure test(my requests is also random) ，I user the command 'GE…

---

## [Elasticsearch array only contains query](https://discuss.elastic.co/t/elasticsearch-array-only-contains-query/298666)

<div class="topic-metadata">

**Author:** [@viswanathk243](https://discuss.elastic.co/u/viswanathk243)\
**Replies:** 1\
**Last updated:** [March 3, 2022, 3:07am UTC](https://discuss.elastic.co/t/elasticsearch-array-only-contains-query/298666 "2022-03-03T03:07:26Z")

</div>

Let's say I've data in this format: { "id": "doc0", "tags": \["a", "b", "c"\] } { "id": "doc1", "tags": \["a", "b", "c", "d"\] } { "id": "doc2", "tags": \["a", "b"\] } I need to form an ES query that fetches on…

---

## [Guidance on ASP.NET core, Serilog and how to correctly log to an Elastic stack](https://discuss.elastic.co/t/guidance-on-asp-net-core-serilog-and-how-to-correctly-log-to-an-elastic-stack/281673)

<div class="topic-metadata">

**Author:** [@agKaspar](https://discuss.elastic.co/u/agKaspar)\
**Replies:** 3\
**Last updated:** [March 3, 2022, 12:41am UTC](https://discuss.elastic.co/t/guidance-on-asp-net-core-serilog-and-how-to-correctly-log-to-an-elastic-stack/281673 "2022-03-03T00:41:00Z")

</div>

We have a microservice architecture running in a kubernetes cluster, and are using the Elastic stack (deployed using EKS providers) for monitoring everything. One of the last aspects I'm struggling with, is how to correc…

---

## [Newb/learner floundering](https://discuss.elastic.co/t/newb-learner-floundering/298216)

<div class="topic-metadata">

**Author:** [@mrodent](https://discuss.elastic.co/u/mrodent)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 11:44pm UTC](https://discuss.elastic.co/t/newb-learner-floundering/298216 "2022-03-02T23:44:37Z")

</div>

When I say newb, I have in fact developed a couple of minor apps which use the most basic aspects of creating an ES index and then searching it (in Python). The resource I might naturally expect to go to, with v 7.16 cu…

---

## [Update by query with index alias](https://discuss.elastic.co/t/update-by-query-with-index-alias/298610)

<div class="topic-metadata">

**Author:** [@Metheny](https://discuss.elastic.co/u/Metheny)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 11:09pm UTC](https://discuss.elastic.co/t/update-by-query-with-index-alias/298610 "2022-03-02T23:09:09Z")

</div>

In the Alias documentation it says that write operations aren't allowed on index alias and that it would return an error: If an alias points to multiple indices or data streams and is\_write\_index isn’t set, the alias r…

---

## [How long does it usually take for another master candidate to be elected?](https://discuss.elastic.co/t/how-long-does-it-usually-take-for-another-master-candidate-to-be-elected/298617)

<div class="topic-metadata">

**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\
**Replies:** 1\
**Last updated:** [March 2, 2022, 11:08pm UTC](https://discuss.elastic.co/t/how-long-does-it-usually-take-for-another-master-candidate-to-be-elected/298617 "2022-03-02T23:08:07Z")

</div>

I have a cluster like below. node1 master-node : master(true), data(false) data-node-1 : master(true), data(true) node2 data-node-2 : master(true), data(true) node3 data-node-3 : master(false), data(true) When th…

---

## [Elasticsearch node limitations and scaling](https://discuss.elastic.co/t/elasticsearch-node-limitations-and-scaling/298594)

<div class="topic-metadata">

**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\
**Replies:** 1\
**Last updated:** [March 2, 2022, 11:07pm UTC](https://discuss.elastic.co/t/elasticsearch-node-limitations-and-scaling/298594 "2022-03-02T23:07:27Z")

</div>

Hi, I'm having some anomalies with my 3 nodes cluster, my nodes have some instability, I keep losing a node each time and sometimes the cluster take long time to recover, but i'm not sure if the root cause is a cluster …

---

## [Incomplete number of total integrations under "Browse Integrations"](https://discuss.elastic.co/t/incomplete-number-of-total-integrations-under-browse-integrations/298675)

<div class="topic-metadata">

**Author:** [@sfinxone](https://discuss.elastic.co/u/sfinxone)\
**Replies:** 1\
**Last updated:** [March 2, 2022, 9:13pm UTC](https://discuss.elastic.co/t/incomplete-number-of-total-integrations-under-browse-integrations/298675 "2022-03-02T21:13:13Z")

</div>

Hi, I'm having a weird issue with an ELK deployment on a particular system. After starting and configuring Elasticsearch and Kibana, I don't get the complete list of integrations under "browse integrations". I am getting…

---

## [Core vs extended field regarding a mutate error](https://discuss.elastic.co/t/core-vs-extended-field-regarding-a-mutate-error/298653)

<div class="topic-metadata">

**Author:** [@itschobot](https://discuss.elastic.co/u/itschobot)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 8:24pm UTC](https://discuss.elastic.co/t/core-vs-extended-field-regarding-a-mutate-error/298653 "2022-03-02T20:24:25Z")

</div>

I'm getting a mutate error where the "host" value is being set to the "device\_hostname"but was wondering if it's because one is a core field and the other is an extended field? Here is what is being applied in my filter…

---

## [Using a Counter to Flexibly Return to Most Recent Data in Dashboard](https://discuss.elastic.co/t/using-a-counter-to-flexibly-return-to-most-recent-data-in-dashboard/298575)

<div class="topic-metadata">

**Author:** [@clibassi](https://discuss.elastic.co/u/clibassi)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 7:14pm UTC](https://discuss.elastic.co/t/using-a-counter-to-flexibly-return-to-most-recent-data-in-dashboard/298575 "2022-03-02T19:14:01Z")

</div>

Cross posting this from a r/kibana post I made that has yet to receive any responses Maybe a bit of an oddball question here. I have a workflow that automatically downloads data from a federal website each week, process…

---

## [Elastic Search Lowercase analyser does not return search result](https://discuss.elastic.co/t/elastic-search-lowercase-analyser-does-not-return-search-result/298662)

<div class="topic-metadata">

**Author:** [@Leo\_Baby\_Jacob](https://discuss.elastic.co/u/Leo_Baby_Jacob)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 6:47pm UTC](https://discuss.elastic.co/t/elastic-search-lowercase-analyser-does-not-return-search-result/298662 "2022-03-02T18:47:39Z")

</div>

I have a text based index like below. I am trying to maintain both exact search and ambiguous search based on tokens based on user input. While text based search works fine(partial search) when it comes to term search it…

---

## [Delete previous document](https://discuss.elastic.co/t/delete-previous-document/298602)

<div class="topic-metadata">

**Author:** [@Nasser](https://discuss.elastic.co/u/Nasser)\
**Replies:** 1\
**Last updated:** [March 2, 2022, 6:35pm UTC](https://discuss.elastic.co/t/delete-previous-document/298602 "2022-03-02T18:35:15Z")

</div>

Hi i have jdbc input run every min and i want to delete the previous document that inserted in the index once the schedule run how the logstash structure will be ?

---

## [Disable response logging (access log) in Kibana \[7.16.3\]](https://discuss.elastic.co/t/disable-response-logging-access-log-in-kibana-7-16-3/297889)

<div class="topic-metadata">

**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Replies:** 4\
**Last updated:** [March 2, 2022, 6:15pm UTC](https://discuss.elastic.co/t/disable-response-logging-access-log-in-kibana-7-16-3/297889 "2022-03-02T18:15:59Z")

</div>

Hi, everyone I have configured Kibana 7.16.3 logging in order not to be so verbose. Here you are an example: logging: root: level: error However, I would like to disable response information: {"type":"response"…

---

## [Help for parsing with Grok filter](https://discuss.elastic.co/t/help-for-parsing-with-grok-filter/298635)

<div class="topic-metadata">

**Author:** [@ASRLO](https://discuss.elastic.co/u/ASRLO)\
**Replies:** 1\
**Last updated:** [March 2, 2022, 6:13pm UTC](https://discuss.elastic.co/t/help-for-parsing-with-grok-filter/298635 "2022-03-02T18:13:28Z")

</div>

Hello, I would like to split my message field on my logs but I don't master the grok filter at all, can you suggest a split? Here is the message field to cut: Windows Installer a reconfiguré le produit. Nom du produit…

---

## [Autocomplete with range](https://discuss.elastic.co/t/autocomplete-with-range/298644)

<div class="topic-metadata">

**Author:** [@earlyriser01](https://discuss.elastic.co/u/earlyriser01)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 3:50pm UTC](https://discuss.elastic.co/t/autocomplete-with-range/298644 "2022-03-02T15:50:08Z")

</div>

Hi all! I want to use my custom analyzer (autocomplete -- below) on a number field that I have indexed as shown below. I am using Ruby on Rails Elasticsearch version. settings index: { analysis: { filter:…

---

## [Share the Kibana dashboard to outside network users](https://discuss.elastic.co/t/share-the-kibana-dashboard-to-outside-network-users/298145)

<div class="topic-metadata">

**Author:** [@abhishek\_dixit](https://discuss.elastic.co/u/abhishek_dixit)\
**Replies:** 1\
**Last updated:** [March 2, 2022, 3:30pm UTC](https://discuss.elastic.co/t/share-the-kibana-dashboard-to-outside-network-users/298145 "2022-03-02T15:30:43Z")

</div>

Hi Team I have created the dashboard in our local network, i need to share the dashboard to outside network users. Is there any way we can acchive this in kibana.

---

## [How do we create a trend line on Kibana?](https://discuss.elastic.co/t/how-do-we-create-a-trend-line-on-kibana/298624)

<div class="topic-metadata">

**Author:** [@Priyanka\_Rajpal](https://discuss.elastic.co/u/Priyanka_Rajpal)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 3:13pm UTC](https://discuss.elastic.co/t/how-do-we-create-a-trend-line-on-kibana/298624 "2022-03-02T15:13:17Z")

</div>

How do I create a trend line for a bar graph, where on X axis I have date histogram and on Y axis sum/count? (Not referring to line graph when saying trend line) Thanks

---

## [SSL error in enterprise 7.17.0](https://discuss.elastic.co/t/ssl-error-in-enterprise-7-17-0/298630)

<div class="topic-metadata">

**Author:** [@bibilena](https://discuss.elastic.co/u/bibilena)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 2:32pm UTC](https://discuss.elastic.co/t/ssl-error-in-enterprise-7-17-0/298630 "2022-03-02T14:32:48Z")

</div>

Hello, I use a docker-compose for elastic, enterprise and Kibana. I use letsencrypt for the certificate and I want to use https. I have a several number of errors. I use 7.17.0 version ent-search\_1 | Custom Enterpri…

---

## [Elastic Stack 7.17.1 Security Update](https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447)

<div class="topic-metadata">

**Author:** [@Levine](https://discuss.elastic.co/u/Levine)\
**Replies:** 0\
**Last updated:** [February 28, 2022, 9:24pm UTC](https://discuss.elastic.co/t/elastic-stack-7-17-1-security-update/298447 "2022-02-28T21:24:04Z")

</div>

Elasticsearch privilege escalation issue (ESA-2022-02) A flaw was discovered in elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security …

---

## [Field selector for a parameterized visualization](https://discuss.elastic.co/t/field-selector-for-a-parameterized-visualization/298589)

<div class="topic-metadata">

**Author:** [@Ignacio\_Garcia](https://discuss.elastic.co/u/Ignacio_Garcia)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 1:58pm UTC](https://discuss.elastic.co/t/field-selector-for-a-parameterized-visualization/298589 "2022-03-02T13:58:20Z")

</div>

Hi, I'm new to ELK so i'm playing around with visualizations to test them. I'd like to replicate jconsole on kibana 7.17 (using jolokia) First: It seems is not possible to have tabs for building a composed dashboard, s…

---

## [Pass each matched record value to filter in Elasticsearch](https://discuss.elastic.co/t/pass-each-matched-record-value-to-filter-in-elasticsearch/298541)

<div class="topic-metadata">

**Author:** [@ZulQ](https://discuss.elastic.co/u/ZulQ)\
**Replies:** 2\
**Last updated:** [March 2, 2022, 1:39pm UTC](https://discuss.elastic.co/t/pass-each-matched-record-value-to-filter-in-elasticsearch/298541 "2022-03-02T13:39:37Z")

</div>

For geo\_distance query I'm using a constant value for distance. I need to make it dynamic. So I want to pass the above matched record radius value to distance. Here's the code: let searchRadius = '12KM' query:…

---

## [There is no grok expression that can parse 100% of the following log information](https://discuss.elastic.co/t/there-is-no-grok-expression-that-can-parse-100-of-the-following-log-information/298462)

<div class="topic-metadata">

**Author:** [@jie](https://discuss.elastic.co/u/jie)\
**Replies:** 4\
**Last updated:** [March 2, 2022, 1:10pm UTC](https://discuss.elastic.co/t/there-is-no-grok-expression-that-can-parse-100-of-the-following-log-information/298462 "2022-03-02T13:10:11Z")

</div>

hello logtfile 12Jul20 10:18:09.561645: hello IT00S451.uaes.com (port 57276) 12Jul20 10:18:09.561645: info request for enable\_MULTI\_v7 from IT00S451.uaes.com (port 57276) 12Jul20 10:18:09.561645: exit IT00S451.uaes.co…

---

## [Check license for production environment](https://discuss.elastic.co/t/check-license-for-production-environment/298597)

<div class="topic-metadata">

**Author:** [@Rohit\_Keshari](https://discuss.elastic.co/u/Rohit_Keshari)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 11:15am UTC](https://discuss.elastic.co/t/check-license-for-production-environment/298597 "2022-03-02T11:15:29Z")

</div>

Is it use open source Elasticsearch 7.10.2 in production environment?

---

## [Calculate cosine similarity for nested object in elasticsearch using Python](https://discuss.elastic.co/t/calculate-cosine-similarity-for-nested-object-in-elasticsearch-using-python/298601)

<div class="topic-metadata">

**Author:** [@RiyaP](https://discuss.elastic.co/u/RiyaP)\
**Replies:** 0\
**Last updated:** [March 2, 2022, 9:42am UTC](https://discuss.elastic.co/t/calculate-cosine-similarity-for-nested-object-in-elasticsearch-using-python/298601 "2022-03-02T09:42:15Z")

</div>

I am working on an use case which has documents in following format:- \[{'Fruits': \['Mango', 'Apple'\]}, {'Fruits': \['Banana', 'Guava', 'Mango'\]}, {'Fruits': \['Grapes', 'Apple'\]}\] I am storing the data into Elasticsear…

---

## [Continuous transformation averaging](https://discuss.elastic.co/t/continuous-transformation-averaging/298494)

<div class="topic-metadata">

**Author:** [@sg09](https://discuss.elastic.co/u/sg09)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 10:17am UTC](https://discuss.elastic.co/t/continuous-transformation-averaging/298494 "2022-03-02T10:17:00Z")

</div>

Hi, We collect device behavior/events during the day in a timeline index. Devices are turn on and off by customers and events are sent as they happen and each event provides event name and time consumed for each event. …

---

## [Event.set does not work](https://discuss.elastic.co/t/event-set-does-not-work/298317)

<div class="topic-metadata">

**Author:** [@stemons](https://discuss.elastic.co/u/stemons)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 8:33am UTC](https://discuss.elastic.co/t/event-set-does-not-work/298317 "2022-03-02T08:33:45Z")

</div>

Hello, I'm trying to create new field in my filter, but seems that event.set does not work properly. I can't see neither errors nor the new fields in elastic. I had to add the if condition since the field is not contain…

---

## [Visualize infrastructure performance](https://discuss.elastic.co/t/visualize-infrastructure-performance/297776)

<div class="topic-metadata">

**Author:** [@Rick\_V](https://discuss.elastic.co/u/Rick_V)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 8:26am UTC](https://discuss.elastic.co/t/visualize-infrastructure-performance/297776 "2022-03-02T08:26:33Z")

</div>

Hi, i want to create an infrastructure dashboards which shows the health of all systems in one visualization, say i have 100 servers, i want to monitor them all with a single metric. What i would like is a visualization…

[Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=689)

[Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=691)
